WordPress Dreamfox Media Shipping gateway per Product for Woocommerce Plugin < 2.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Dreamfox Media Shipping gateway per Product for Woocommerce Type Plugin Vulnerable versions 2.3.3 Fixed in 2.3.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 34683916968...

WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin < 2.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin versions 2.0.4. Solution Update the WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin to the latest available version at least 2.0.4...

WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin < 2.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin versions 2.0.4. Solution Update the WordPress Dreamfox Media Shipping gateway per Product for Woocommerce plugin to the latest available version at least 2.0.4...

PRODSECBUG-2322: Arbitrary code execution due to unsafe handling of a shipping gateway

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...